Stop payroll diversion fraud when AI agents handle HR requests
Payroll diversion starts with a convincing “please change my bank account” email. An HR agent that updates the HR system on request is exactly what attackers want.
Gmail
Hibob (Legacy)The workflow
An email asks HR to change an employee's salary account. The agent finds the employee in HiBob and prepares the bank-detail change for review.
The attack hidden in it
A hidden comment claims the employee “already verified by phone” and tells the agent to update HiBob directly.
How the guardrails handle it
- Screening withholds the hidden claim; the agent sees only the request.
- Bank-detail changes are writes and always wait for a person.
- The approval shows the email came from a personal address, so it can be verified out of band.
Same workflow, every company size
The agent and the guardrails stay the same; only the systems behind them change.
Workday
SAP SuccessFactors
Personio
BambooHRQuestions
Can an AI agent change payroll details in the HR system?
It can prepare the change. A person must approve it, and nothing the agent reads can skip that.
What is payroll diversion fraud?
An attacker poses as an employee and asks HR to send their salary to a new account.
Which HR systems are supported?
HiBob, Workday, BambooHR, Personio, SAP SuccessFactors and 60+ other HRIS.